Tagdiv

Tagdiv Composer

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2026-12561

  • EPSS 0.18%
  • Veröffentlicht 25.08.2026 04:27:01
  • Zuletzt bearbeitet 28.09.2026 23:10:00

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in all versions up to and including 5.4.5. This is due to insufficient input sanitization and output escaping in the vc_raw_html::rend...

7.1

CVE-2026-57734

  • EPSS 0.18%
  • Veröffentlicht 13.07.2026 08:41:24
  • Zuletzt bearbeitet 13.07.2026 16:57:56

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tagDiv Composer: from n/a through <= 5.4.3.

5.3

CVE-2026-39712

  • EPSS 0.17%
  • Veröffentlicht 08.04.2026 08:30:48
  • Zuletzt bearbeitet 24.07.2026 20:10:00

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer td-composer allows Code Injection.This issue affects tagDiv Composer: from n/a through <= 5.4.3.

6.5

CVE-2026-39692

  • EPSS 0.13%
  • Veröffentlicht 08.04.2026 08:30:44
  • Zuletzt bearbeitet 24.07.2026 20:10:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Stored XSS.This issue affects tagDiv Composer: from n/a through <= 5.4.3.

7.1

CVE-2025-50001

  • EPSS 0.15%
  • Veröffentlicht 19.03.2026 08:07:39
  • Zuletzt bearbeitet 29.04.2026 10:16:49

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tagDiv Composer: from n/a through <= 5.4.2.

6.5

CVE-2025-50005

  • EPSS 0.21%
  • Veröffentlicht 22.01.2026 16:51:44
  • Zuletzt bearbeitet 27.04.2026 16:16:27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows DOM-Based XSS.This issue affects tagDiv Composer: from n/a through <= 5.4.2.

7.1

CVE-2025-62031

  • EPSS 0.21%
  • Veröffentlicht 06.11.2025 15:55:28
  • Zuletzt bearbeitet 07.10.2026 21:10:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1.

6.5

CVE-2025-62030

  • EPSS 0.19%
  • Veröffentlicht 06.11.2025 15:55:27
  • Zuletzt bearbeitet 07.10.2026 21:10:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1.

6.1

CVE-2025-2806

  • EPSS 0.32%
  • Veröffentlicht 08.05.2025 11:23:40
  • Zuletzt bearbeitet 04.06.2025 22:53:20

The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This...

5.4

CVE-2025-3510

  • EPSS 0.26%
  • Veröffentlicht 02.05.2025 03:21:18
  • Zuletzt bearbeitet 06.05.2025 15:19:30

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...